Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ic1A8hlkk7MGUFBa21Cyty4NVL0.roa
File: Ic1A8hlkk7MGUFBa21Cyty4NVL0.roa (raw, json)
Hash identifier: rlgiKH800owEcOrOEw8SKjRYebqlXtHZMK1BMbDhn9I=
Subject key identifier: 21:CD:40:F2:19:64:93:B3:06:50:50:5A:DB:50:B2:B7:2E:0D:54:BD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 014F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ic1A8hlkk7MGUFBa21Cyty4NVL0.roa
Signing time: Wed 24 May 2023 16:31:17 +0000
ROA not before: Wed 24 May 2023 16:31:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:31:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=21CD40F2196493B30650505ADB50B2B72E0D54BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:e0:fa:d9:68:4d:1f:c4:b8:87:1c:cf:d8:
27:14:42:af:98:bc:ab:ac:4e:d3:54:c4:28:5b:3f:
9e:2c:ae:e3:62:3d:66:41:2f:a4:50:91:8b:20:5b:
a2:08:4e:d6:b5:b7:76:15:de:5b:89:5c:50:c6:0d:
b8:a5:f1:b7:a8:41:a8:4b:32:3d:cf:31:01:75:07:
c8:8e:be:0b:f4:e2:08:6f:51:f5:2e:fc:9e:6d:14:
8f:7c:8b:f1:f7:eb:93:f3:b6:0c:12:53:44:96:78:
62:a8:80:58:97:11:6e:b5:79:da:f6:18:a5:f7:3a:
ab:23:de:cf:7f:90:c2:de:42:ec:68:71:68:03:77:
56:3f:ce:68:a2:52:6b:17:10:bc:46:23:bd:58:e1:
1b:67:a2:d7:9f:5b:c3:1d:3a:27:7b:36:cc:84:d7:
a3:0f:12:ae:02:ea:3d:13:b2:10:37:c4:65:90:24:
33:48:d1:f2:66:d8:3a:e3:87:08:4c:62:88:65:1a:
16:56:56:14:be:c6:d4:e4:05:8c:83:0b:0f:03:9a:
ab:10:11:44:3c:13:8a:b6:ea:87:de:4a:50:04:98:
5e:92:92:3d:77:1c:75:01:98:f8:8a:07:c6:05:0a:
35:f1:d3:28:61:11:30:b8:0d:45:a0:64:83:6f:61:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:40:F2:19:64:93:B3:06:50:50:5A:DB:50:B2:B7:2E:0D:54:BD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ic1A8hlkk7MGUFBa21Cyty4NVL0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.36.0/23
Signature Algorithm: sha256WithRSAEncryption
10:77:e1:ea:63:42:7c:5f:5e:cb:6e:fe:7b:26:7f:80:7f:28:
35:50:4d:c3:96:31:c6:92:b9:67:ca:14:82:d9:ac:c9:0a:88:
3e:5d:6f:64:8c:70:97:b6:76:cb:70:60:29:3a:80:a6:f3:71:
25:66:00:28:b1:11:57:27:18:0f:95:29:67:d6:a2:37:89:cf:
09:88:b2:16:a4:95:17:06:8c:c1:96:11:87:7e:5e:aa:89:e4:
a6:24:fc:1f:4b:48:87:d8:75:22:fc:7c:cc:a7:81:3d:b1:7c:
ad:bf:a9:ee:74:45:78:61:1f:cc:67:7f:f1:f8:f8:b3:b2:da:
a1:d9:aa:03:e9:87:0f:e9:4b:d4:82:9f:ba:37:67:8d:80:a2:
b1:96:6c:bc:20:b3:32:2a:42:4e:6d:93:f9:d0:64:0f:c4:96:
14:d3:4b:97:5e:17:a3:a0:1e:05:2a:d6:47:21:f5:3a:70:3c:
6d:f6:d8:fc:b1:fe:e8:34:d9:91:dc:0c:c1:af:eb:53:d7:7d:
53:23:b9:2c:a3:b7:72:a3:d7:b4:28:04:7d:ad:c5:20:0c:a9:
00:ac:ef:1c:bb:32:6d:b7:61:99:8d:3f:97:c1:ae:87:c6:6f:
6d:31:65:b4:bc:6e:b5:19:fc:15:70:57:72:8a:22:1b:98:6e:
da:3e:b9:36
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMxMTdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDIxQ0Q0MEYyMTk2NDkz
QjMwNjUwNTA1QURCNTBCMkI3MkUwRDU0QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq2uD62WhNH8S4hxzP2CcUQq+YvKusTtNUxChbP54sruNiPWZB
L6RQkYsgW6IITta1t3YV3luJXFDGDbil8beoQahLMj3PMQF1B8iOvgv04ghvUfUu
/J5tFI98i/H365PztgwSU0SWeGKogFiXEW61edr2GKX3Oqsj3s9/kMLeQuxocWgD
d1Y/zmiiUmsXELxGI71Y4RtnotefW8MdOid7NsyE16MPEq4C6j0TshA3xGWQJDNI
0fJm2DrjhwhMYohlGhZWVhS+xtTkBYyDCw8DmqsQEUQ8E4q26ofeSlAEmF6Skj13
HHUBmPiKB8YFCjXx0yhhETC4DUWgZINvYWaDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIc1A8hlkk7MGUFBa21Cyty4NVL0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0ljMUE4aGxrazdNR1VGQmEyMUN5dHk0TlZMMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBTyQwDQYJKoZIhvcNAQELBQADggEBABB34epjQnxfXstu/nsmf4B/KDVQ
TcOWMcaSuWfKFILZrMkKiD5db2SMcJe2dstwYCk6gKbzcSVmACixEVcnGA+VKWfW
ojeJzwmIshaklRcGjMGWEYd+XqqJ5KYk/B9LSIfYdSL8fMyngT2xfK2/qe50RXhh
H8xnf/H4+LOy2qHZqgPphw/pS9SCn7o3Z42AorGWbLwgszIqQk5tk/nQZA/ElhTT
S5deF6OgHgUq1kch9TpwPG322Pyx/ug02ZHcDMGv61PXfVMjuSyjt3Kj17QoBH2t
xSAMqQCs7xy7Mm23YZmNP5fBrofGb20xZbS8brUZ/BVwV3KKIhuYbto+uTY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org